GCVE - cpe:2.3:o:tenda:o3_firmware1.0.0.10\(2478\):*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:o3_firmware1.0.0.10\(2478\):*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	O3 Firmware1.0.0.10(2478) (`479f79ad-5cfb-5957-8ff6-8ae39132b2aa`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-12214`	vulnerable	2026-06-08 07:04:29.871364	Tenda O3 sysAutoReboot GetValue stack-based overflow HIGH (8.8) A vulnerability was detected in Tenda O3 1.0.0.10(2478). This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Performing a manipulation of the argument enable results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used. Published: 2025-10-27T04:02:10.027Z Updated: 2026-02-24T07:05:51.188Z Open on db.gcve.eu Reference links https://vuldb.com/?id.329884 https://vuldb.com/?ctiid.329884 https://vuldb.com/?submit.673269 https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/O3v2.0/sysAutoReboot.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12213`	vulnerable	2026-06-08 07:04:29.870709	Tenda O3 setVlanConfig GetValue stack-based overflow HIGH (8.8) A security vulnerability has been detected in Tenda O3 1.0.0.10(2478). This vulnerability affects the function SetValue/GetValue of the file /goform/setVlanConfig. Such manipulation of the argument lan leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Published: 2025-10-27T04:02:06.607Z Updated: 2026-02-24T07:05:37.319Z Open on db.gcve.eu Reference links https://vuldb.com/?id.329883 https://vuldb.com/?ctiid.329883 https://vuldb.com/?submit.673268 https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/O3v2.0/setVlanConfig.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12212`	vulnerable	2026-06-08 07:04:29.870255	Tenda O3 setNetworkService GetValue stack-based overflow HIGH (8.8) A weakness has been identified in Tenda O3 1.0.0.10(2478). This affects the function SetValue/GetValue of the file /goform/setNetworkService. This manipulation of the argument upnpEn causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Published: 2025-10-27T03:32:10.375Z Updated: 2026-02-24T07:05:21.595Z Open on db.gcve.eu Reference links https://vuldb.com/?id.329882 https://vuldb.com/?ctiid.329882 https://vuldb.com/?submit.673267 https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/O3v2.0/setNetworkService.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12211`	vulnerable	2026-06-08 07:04:29.860443	Tenda O3 setDmzInfo GetValue stack-based overflow HIGH (8.8) A security flaw has been discovered in Tenda O3 1.0.0.10(2478). Affected by this issue is the function SetValue/GetValue of the file /goform/setDmzInfo. The manipulation of the argument dmzIP results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Published: 2025-10-27T03:32:06.892Z Updated: 2026-02-24T07:05:04.159Z Open on db.gcve.eu Reference links https://vuldb.com/?id.329881 https://vuldb.com/?ctiid.329881 https://vuldb.com/?submit.673265 https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/O3v2.0/setDmzInfo.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12210`	vulnerable	2026-06-08 07:04:29.859917	Tenda O3 AdvSetLanip GetValue stack-based overflow HIGH (8.8) A vulnerability was identified in Tenda O3 1.0.0.10(2478). Affected by this vulnerability is the function SetValue/GetValue of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Published: 2025-10-27T03:02:13.722Z Updated: 2026-02-24T07:04:49.570Z Open on db.gcve.eu Reference links https://vuldb.com/?id.329880 https://vuldb.com/?ctiid.329880 https://vuldb.com/?submit.673264 https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/O3v2.0/AdvSetLanip.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12209`	vulnerable	2026-06-08 07:04:29.858100	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6965`	vulnerable	2026-06-08 06:58:20.850039	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6964`	vulnerable	2026-06-08 06:58:20.849090	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6963`	vulnerable	2026-06-08 06:58:20.847194	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6962`	vulnerable	2026-06-08 06:58:20.844751	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.